Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5eS3qgWh59wA16uYS0JMqKN2m0c.roa
File: 5eS3qgWh59wA16uYS0JMqKN2m0c.roa (raw, json)
Hash identifier: tDgr+oOiXZlUu378KSyI8mitrSZivKP9a1Y9a03CEMw=
Subject key identifier: E5:E4:B7:AA:05:A1:E7:DC:00:D7:AB:98:4B:42:4C:A8:A3:76:9B:47
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0EEFB881
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5eS3qgWh59wA16uYS0JMqKN2m0c.roa
Signing time: Sat 01 Jan 2022 15:04:42 +0000
ROA not before: Sat 01 Jan 2022 15:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208858
IP address blocks: 45.66.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250591361 (0xeefb881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 15:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e4b7aa05a1e7dc00d7ab984b424ca8a3769b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:43:36:73:bf:d0:3b:da:1e:4a:4b:c8:8e:
bf:59:27:f3:eb:97:7b:d1:78:a0:a2:b8:f2:60:3e:
d2:d2:e5:43:f1:63:95:93:69:a7:fe:78:fb:ea:eb:
d4:95:32:b4:8c:41:a3:ed:24:f3:f2:cf:c8:1d:f7:
f2:13:98:18:f7:dc:e4:2a:d7:72:df:af:f2:a7:d9:
fe:08:ec:22:1b:73:f9:2b:b9:e0:86:fd:fd:06:cb:
ce:19:79:3a:b7:54:1c:da:f5:8c:eb:5c:9b:d6:26:
4a:42:9a:23:cb:90:74:00:ee:09:3f:1a:6b:6d:7b:
65:9a:06:4d:66:e8:66:dc:a2:5b:fd:67:e6:db:f7:
a9:0e:c5:2b:f5:f8:f4:ef:ad:7a:4e:2e:56:8d:31:
66:42:9a:9e:2f:fb:2a:e5:e4:05:b3:2d:d0:1d:e2:
0a:6d:2d:fd:c3:a2:6f:b0:31:35:ca:ed:88:f9:86:
3d:18:20:95:3a:43:40:f4:18:29:63:85:a0:89:80:
6a:39:c2:41:e3:99:8c:8f:6f:b1:d9:4b:a5:26:08:
cd:39:af:c9:c0:c0:1d:49:5e:46:4e:95:6d:8c:ee:
00:be:f3:2e:cd:8f:c0:01:6a:50:4a:21:c8:9e:00:
11:d9:af:f2:a2:15:3a:34:94:6c:51:5f:52:fb:2f:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:B7:AA:05:A1:E7:DC:00:D7:AB:98:4B:42:4C:A8:A3:76:9B:47
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/5eS3qgWh59wA16uYS0JMqKN2m0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.184.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:f0:4e:61:11:db:fc:c7:53:33:df:79:a3:f6:cc:5e:40:
66:8d:74:47:d2:3f:be:93:ff:39:d4:f8:f0:8e:b9:18:6b:e4:
3e:55:1e:2a:93:b9:6e:5d:97:ab:91:09:ff:b1:12:d8:0d:f2:
4d:01:1b:72:2f:d8:67:32:bc:ba:8c:06:3e:21:1e:89:4c:e8:
ad:ee:91:42:22:81:41:9f:c6:ee:15:c3:43:5b:0e:1a:d3:82:
95:0f:6b:69:41:f8:91:9d:8d:3f:f6:07:70:da:da:06:48:71:
ea:d2:ba:e8:e2:fe:65:d7:45:c8:32:f6:9a:73:88:8c:35:d0:
15:0f:d6:7a:49:f7:40:dc:f1:6a:a2:a1:7f:fb:3a:c3:d0:fa:
c2:6c:a0:c7:03:08:13:a2:be:f7:db:ab:05:0f:a7:82:f7:84:
96:c4:8d:76:e2:14:71:b9:71:af:d6:9e:ed:11:03:86:39:d8:
6d:a3:d5:34:70:18:08:8c:ba:d7:30:7f:92:70:eb:09:96:9f:
b5:8c:cc:0d:99:13:f1:33:ad:05:d5:4d:e5:e6:31:3f:b1:53:
cb:97:4c:8d:08:cf:9b:1d:4e:0e:57:3b:5b:eb:0e:99:25:f0:
a5:5d:87:cf:76:c3:5a:c6:f9:89:b2:e0:2b:0f:2f:3d:17:51:
13:ba:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:15:11 2025 by rpki-client